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Amendments to the Specification 

On page 8, lines 6-10 of Application as filed, please replace the paragraph with 
5 the following paragraph, as amended: 

Figure 3 is a functional block diagram 4 0 diagram of an identity based service 
system 10b, which further comprises a discovery service 42 associated with the 
basic authentication agency 14, a service provider 42, and a service consumer 
10 48. Figure 4 is a flow diagram 60 for the access of service within an identity 
based service system 10b. 

On page 8, lines 12-23 of Application as filed, please replace the paragraph with 
the following paragraph, as amended: 

15 

As seen in Figure 3 and Figure 4, a principal 12, such as a user or user agent, 
logs in 18 and f ec ei v e s 19a receives 19b a BAA assertion and discovery service 
descriptor from the basic authentication agency 14. The principal 12 then 
authenticates 44 at the participant 16, with the received BAA assertion and 

20 discovery service descriptor 19a descriptor 19b . The service consumer 48 
associated with the participant 16 then requests 50 a service descriptor 26 and 
assertion for service 28 at the basic authentication agency 14, such as through a 
discovery service 42 associated with the basic authentication agency 14. Based 
upon the request 50, the participant 16 receives 51 the service descriptor 26 and 

25 assertion for service 28 from the basic authentication agency 14 or associated 
discovery service 42. The participant 16 then invokes service 52, e.g. 52a (FIG. 
4), with the received assertion for service 28, at a service provider 54." 

On page 8, line 31 to page 9, line 2 of Application as filed, please replace the 
30 paragraph with the following paragraph, as amended: 

As seen in Figure 3, the basic authentication agency BAA 14 provides 
authentication 19, e.g. 19b, to 4-9ch-to the principal 12, based upon a successful 
log in 18. The principal 12 then interacts with the participant 16, and relays the 
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authentication information 19, comprising a BAA assertion 45 and a discovery 
service descriptor 26. 

On page 9, lines 12-15 of Application as filed, please replace the paragraph with 
5 the following paragraph, as amended: 

As seen in Figure 3, the identity based service system 10b comprises a web- 
service infrastructure, which comprises the discovery service 42, service 
invocation 52, e.g 52a, a permission and authorization framework, a change 
10 management framework, as well as a mobile infrastructure. 

On page 9, lines 21-23 of Application as filed, please replace the paragraph with 
the following paragraph, as amended: 

15 A discovery device (DS) 44 is 42 is typically hosted by a basic authentication 
agency (BAA) 14, and enables service consumers 48 to discover service 
endpoint information 96 (FIG. 7) associated with the personal web services 116 
of a user U. 

20 On page 11, lines 20-32 of Application as filed, please replace the paragraph 
with the following paragraph, as amended: 

System Operation. The identity based service system 10, such as the system 
10c shown in Figure 5, is readily implemented to provide enhanced value for 

25 users U. For example, a principa l 16 principal 12 , such as a user U at a terminal 
192, may initiate a checkout at a bookstore site 120 that is a participant 16 within 
the system 10c. During the checkout, the participant 16,120 typically requests 
50 a service descriptor 26, e.g. a wallet provider 1 18j and a service assertion, i.e. 
ticket 28, from the basic authentication agency BAA 14,116a, such that payment 

30 can be authorized. Upon a proper request 50, the BAA 14,116a sends 51 the 
requested service descriptor 26 and ticket 28 to the participant store 16,120, 
The participant store 16,120 then contacts the service provider 54, e.g. the wallet 
provider 118j, and invokes service 52b, by passing the ticket 28 to the wallet 
provider 118j. The wallet provider 118j processes the request 52b, and sends 
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the results to the participant store 16,120, such that the checkout is either 
authorized or denied. 

On page 22, lines 19-27 of Application as filed, please replace the paragraph 
5 with the following paragraph, as amended: 

Figure 15 is a second view 200 of operation for an identity based service system 
10, wherein the user U is asked if a system identity 29 is desired. Upon the 
establishment of a system identity 29, a participant 16, such as through a service 

1 0 consum e rs consumer 48, is able to find and invoke the web services 54 of a user 
U, such as to readily establish relationships with other providers 120, such as 
through selectable member site links 202. As well, upon the establishment of a 
system identity 29, a user can preferably establish and/or manage other system 
services 116, e.g. such as to establish a profile service 116b or a wallet service 

15 1 16n, through selectable service links 204. 
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